[{"data":1,"prerenderedAt":327},["ShallowReactive",2],{"docs-ip-certificate":3,"docs-nav":284},{"id":4,"title":5,"body":6,"category":270,"dateModified":271,"datePublished":272,"description":158,"draft":273,"extension":274,"icon":271,"meta":275,"navigation":276,"order":277,"path":278,"seo":279,"sitemap":280,"stem":281,"summary":282,"__hash__":283},"docs\u002Fdocs\u002Fip-certificate.md","IP 地址证书申请指南",{"type":7,"value":8,"toc":251},"minimark",[9,14,23,26,42,45,97,103,106,111,144,148,151,161,164,172,176,179,185,188,192,201,205,208,211,215,222,226,229,233,241,245],[10,11,13],"h2",{"id":12},"什么是-ip-地址证书","什么是 IP 地址证书",[15,16,17,18,22],"p",{},"IP 地址证书直接为服务器的公网 IP 地址签发 SSL\u002FTLS 证书，使 ",[19,20,21],"code",{},"https:\u002F\u002F203.0.113.10"," 这样的访问也能建立加密连接。（本文示例 IP 均为 IANA 按 RFC 5737 保留的文档专用网段 203.0.113.0\u002F24，不分配给任何机构或个人、真实公网中不存在；实际操作请替换为自己的公网 IP。）",[15,24,25],{},"适用场景：",[27,28,29,33,36,39],"ul",{},[30,31,32],"li",{},"内部管理系统、后台面板（未绑定域名）",[30,34,35],{},"API 接口服务（直接通过 IP 调用）",[30,37,38],{},"开发\u002F测试环境（临时使用 IP 访问）",[30,40,41],{},"物联网设备管理界面",[10,43,44],{"id":44},"重要限制",[46,47,48,61],"table",{},[49,50,51],"thead",{},[52,53,54,58],"tr",{},[55,56,57],"th",{},"限制项",[55,59,60],{},"说明",[62,63,64,73,81,89],"tbody",{},[52,65,66,70],{},[67,68,69],"td",{},"仅 Let's Encrypt 支持",[67,71,72],{},"其余 4 家 CA（Google Trust Services、ZeroSSL、SSL.com、Actalis）均不支持 IP 证书",[52,74,75,78],{},[67,76,77],{},"仅 HTTP-01 验证",[67,79,80],{},"IP 地址没有 DNS 解析，无法使用 DNS 验证",[52,82,83,86],{},[67,84,85],{},"需要公网可访问",[67,87,88],{},"验证时 CA 需要通过 HTTP 访问你的 IP 地址",[52,90,91,94],{},[67,92,93],{},"80 端口必须开放",[67,95,96],{},"验证文件通过 80 端口提供",[98,99,100],"blockquote",{},[15,101,102],{},"选择「IP 地址证书」类型时，系统会自动将 CA 切换为 Let's Encrypt，其余 CA 置灰不可选。",[10,104,105],{"id":105},"申请流程",[107,108,110],"h3",{"id":109},"_1-填写申请信息","1. 填写申请信息",[27,112,113,120,126,132,138],{},[30,114,115,119],{},[116,117,118],"strong",{},"证书类型","：选择「IP 地址证书」",[30,121,122,125],{},[116,123,124],{},"IP 地址","：填写需要保护的公网 IP，支持 IPv4 和 IPv6，每行一个",[30,127,128,131],{},[116,129,130],{},"证书颁发机构","：自动锁定为 Let's Encrypt",[30,133,134,137],{},[116,135,136],{},"验证方式","：自动锁定为 HTTP 验证",[30,139,140,143],{},[116,141,142],{},"加密算法","：推荐 RSA 2048",[107,145,147],{"id":146},"_2-部署验证文件","2. 部署验证文件",[15,149,150],{},"提交申请后，系统会生成验证信息。你需要在 IP 对应的 Web 服务器上部署验证文件：",[152,153,159],"pre",{"className":154,"code":156,"language":157,"meta":158},[155],"language-bash","# 创建验证目录（以 Nginx 默认根目录为例）\nsudo mkdir -p \u002Fvar\u002Fwww\u002Fhtml\u002F.well-known\u002Facme-challenge\u002F\n\n# 写入验证文件\necho \"系统生成的验证内容\" | sudo tee \u002Fvar\u002Fwww\u002Fhtml\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>\n","bash","",[19,160,156],{"__ignoreMap":158},[15,162,163],{},"或直接使用平台生成的 Nginx 配置片段：",[152,165,170],{"className":166,"code":168,"language":169,"meta":158},[167],"language-nginx","location \u002F.well-known\u002Facme-challenge\u002F {\n    root \u002Fvar\u002Fwww\u002Fhtml;\n}\n","nginx",[19,171,168],{"__ignoreMap":158},[107,173,175],{"id":174},"_3-验证并签发","3. 验证并签发",[15,177,178],{},"确保通过 HTTP 可以访问验证文件：",[152,180,183],{"className":181,"code":182,"language":157,"meta":158},[155],"curl http:\u002F\u002F203.0.113.10\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>\n",[19,184,182],{"__ignoreMap":158},[15,186,187],{},"返回正确内容后，回到平台点击「验证」。验证通过后证书自动签发。",[107,189,191],{"id":190},"_4-下载并部署","4. 下载并部署",[15,193,194,195,200],{},"签发后在证书列表下载对应格式的证书文件，部署到服务器。详见",[196,197,199],"a",{"href":198},"\u002Fdocs\u002Fcert-download","证书下载与格式说明","。",[10,202,204],{"id":203},"一张证书能包含多个-ip-吗","一张证书能包含多个 IP 吗？",[15,206,207],{},"可以。在 IP 地址输入框中每行填写一个 IP，系统会签发一张包含多个 IP 的 SAN 证书。但需注意 Let's Encrypt 对单张证书的 SAN 数量有上限（通常 100 个）。",[10,209,210],{"id":210},"常见问题",[107,212,214],{"id":213},"ip-地址证书和域名证书有什么区别","IP 地址证书和域名证书有什么区别？",[15,216,217,218,221],{},"功能上完全一致，都是标准的 SSL\u002FTLS 证书。区别仅在于证书的 SAN（Subject Alternative Name）字段记录的是 IP 地址而非域名。浏览器访问 ",[19,219,220],{},"https:\u002F\u002F\u003CIP>"," 时同样会显示安全锁。",[107,223,225],{"id":224},"内网-ip-可以申请吗","内网 IP 可以申请吗？",[15,227,228],{},"不可以。CA 机构需要通过公网 HTTP 访问你的 IP 来完成验证，内网 IP（如 192.168.x.x、10.x.x.x）无法从公网访问，验证会失败。",[107,230,232],{"id":231},"ip-证书支持自动续签吗","IP 证书支持自动续签吗？",[15,234,235,236,240],{},"支持。但每次续签都需要重新完成 HTTP 验证，需确保服务器 80 端口持续可访问。如果服务器配置了",[196,237,239],{"href":238},"\u002Fdocs\u002Fdeploy-server","部署客户端","，续签后可自动部署新证书。",[107,242,244],{"id":243},"浏览器访问-ip-地址-https-会报警告吗","浏览器访问 IP 地址 HTTPS 会报警告吗？",[15,246,247,248,250],{},"不会。只要证书有效且由受信任的 CA 签发，浏览器访问 ",[19,249,220],{}," 与访问域名一样显示安全锁，不会有证书警告。",{"title":158,"searchDepth":252,"depth":253,"links":254},2,3,[255,256,257,263,264],{"id":12,"depth":252,"text":13},{"id":44,"depth":252,"text":44},{"id":105,"depth":252,"text":105,"children":258},[259,260,261,262],{"id":109,"depth":253,"text":110},{"id":146,"depth":253,"text":147},{"id":174,"depth":253,"text":175},{"id":190,"depth":253,"text":191},{"id":203,"depth":252,"text":204},{"id":210,"depth":252,"text":210,"children":265},[266,267,268,269],{"id":213,"depth":253,"text":214},{"id":224,"depth":253,"text":225},{"id":231,"depth":253,"text":232},{"id":243,"depth":253,"text":244},"申请与验证",null,"2026-09-09",false,"md",{},true,4,"\u002Fdocs\u002Fip-certificate",{"title":5,"description":158},{"loc":278},"docs\u002Fip-certificate","没有域名也能申请 SSL 证书！IP 地址证书为公网 IP 签发 HTTPS 加密，适用于内部系统、API 服务与测试环境，仅 Let","sAAHb8jWDUwZMHhWoB8OsxKgRbAyLEvZtF7d-FQtD3o",[285,290,292,296,300,303,306,309,312,314,317,320,323,324],{"path":286,"title":287,"category":288,"order":289},"\u002Fdocs\u002Fauto-renew","SSL证书自动续签配置","部署与续签",5,{"path":198,"title":199,"category":288,"order":291},1,{"path":293,"title":294,"category":295,"order":253},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":297,"title":298,"category":288,"order":299},"\u002Fdocs\u002Fcloud-credential","云平台凭证配置指南",6,{"path":301,"title":302,"category":295,"order":252},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":304,"title":305,"category":270,"order":289},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传",{"path":307,"title":308,"category":288,"order":253},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":310,"title":311,"category":288,"order":252},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":238,"title":313,"category":288,"order":277},"服务器部署客户端安装与使用",{"path":315,"title":316,"category":270,"order":291},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",{"path":318,"title":319,"category":295,"order":291},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":321,"title":322,"category":270,"order":252},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":278,"title":5,"category":270,"order":277},{"path":325,"title":326,"category":270,"order":253},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]